"Effective Incident Response Requires Good Cyber Exercise—Is Your Company in Shape?" from McGuire Woods identifies a plethora of realistic challenges that could hinder the success of an incident response plan and associated practical considerations for a tabletop or other testing exercise to mitigate the likelihood that these challenges may thwart an otherwise effective response. The instructive memo outlines issues that the company should proactively address as respects the planning, conduct, and evaluation of the exercise; participation and interactions among management, employees and other potential stakeholders; and engagement of a third-party facilitator.
See these prior reports: "Board's Role in Crisis Management Preparedness & Response," "Crisis Response Preparedness," "Data Breach Incident & Response Trends," "Cybersecurity Incident Preparation & Response: In-House Counsel Role," and "Cybersecurity: Proxy & 10-K Disclosures," and additional information & resources on our Cybersecurity page. This post first appeared in the weekly Society Alert!